---
title: "Facet counts for this workspace's audit log"
method: GET
path: "/api/workspaces/{workspaceId}/audit-logs/facets"
tags: ["Audit Log"]
---

# Facet counts for this workspace's audit log

`GET /api/workspaces/{workspaceId}/audit-logs/facets`

## Request

- Base URL: `https://hiveship.app/api`
- URL: `https://hiveship.app/api/api/workspaces/{workspaceId}/audit-logs/facets`
- Auth: API key in cookie `hiveship_access`

Datadog-style facet response — each dimension carries counts under the other active filters so clicking a facet narrows without zeroing siblings. Workspace-scoped: `workspaceId` is forced before delegation.

## Path parameters

- `workspaceId` string, required

## Response `200`

Per-dimension bucket counts. The `role` dimension is always `[]` here (the `SUPER_ADMIN` / `MANAGER` buckets are intentionally stripped at the workspace boundary).

- object
  - `success` boolean, required
  - `data` object, required
    - `action` object[], required
      - `value` string, required
      - `count` integer, required
      - `label` string
    - `entity` object[], required
      - `value` string, required
      - `count` integer, required
      - `label` string
    - `user` object[], required
      - `value` string, required
      - `count` integer, required
      - `label` string
    - `agent` object[], required
      - `value` string, required
      - `count` integer, required
      - `label` string
    - `actorType` object[], required
      - `value` string, required
      - `count` integer, required
      - `label` string
    - `mcpTool` object[], required
      - `value` string, required
      - `count` integer, required
      - `label` string
    - `role` object[], required
      - `value` string, required
      - `count` integer, required
      - `label` string
    - `workspace` object[], required
      - `value` string, required
      - `count` integer, required
      - `label` string
    - `project` object[], required
      - `value` string, required
      - `count` integer, required
      - `label` string
    - `httpMethod` object[], required
      - `value` string, required
      - `count` integer, required
      - `label` string

## Other responses

- `403`: Caller is not an OWNER or ADMIN

---

[API](https://skmtc.dev/hiveship/apis/hiveship-api.md) · [All operations](https://skmtc.dev/hiveship/apis/hiveship-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hiveship/apis/hiveship-api/revisions/73d3e26544e4?raw)